fix(spec-enforcer): add enforce_all input to process all packages in one run

[Copilot]

The spec-enforcer workflow processes only 2-3 packages per run via round-robin, requiring ~8 daily runs for a full cycle — with no escape hatch when cache loss forces a restart from index 0.

Changes

• New enforce_all boolean input (workflow_dispatch only, default: false) — when true, selects all packages with a README.md in alphabetical order and bypasses rotation state entirely
• Phase 1 selection logic now branches on mode:
  • enforce_all=true → full-sweep: all eligible packages, alphabetical, rotation ignored
  • default → round-robin: existing 2-3 package priority logic unchanged
• PR body includes a Run mode field: full-sweep (enforce_all) or round-robin for audit traceability

Usage

gh workflow run spec-enforcer --field enforce_all=true

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/actions/github-script/git/ref/tags/v9
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 94bd537a09dfb501-d GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[Copilot]

Pull request overview

Adds an enforce_all manual-dispatch input to the spec-enforcer agentic workflow to allow processing all eligible packages in a single run (bypassing the normal 2–3 package round-robin batch), and records the chosen run mode in the PR body for traceability.

Changes:

• Introduces workflow_dispatch input enforce_all (default false) to enable full-sweep runs.
• Updates Phase 1 package selection instructions to branch between full-sweep and round-robin modes.
• Extends the PR body template to include a “Run mode” field for auditing.

Show a summary per file

File	Description
.github/workflows/spec-enforcer.md	Documents the new enforce_all input, selection-mode branching, and PR body run-mode reporting.
.github/workflows/spec-enforcer.lock.yml	Wires the new input through the generated locked workflow and exports related context/env for prompt rendering.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comments suppressed due to low confidence (1)

.github/workflows/spec-enforcer.md:391

• The PR body template section is still titled “Round-Robin State” and always includes “Next packages in rotation”. In enforce_all=true full-sweep runs this is misleading; consider renaming this section (e.g., “Run State”) and conditionally omitting or marking rotation fields as N/A when rotation is bypassed, so the audit trail matches the selected mode.

### Round-Robin State

- **Run mode**: ${{ github.event.inputs.enforce_all == 'true' && 'full-sweep (enforce_all)' || 'round-robin' }}
- **Packages processed this run**: <list>
- **Next packages in rotation**: <list>

• Files reviewed: 2/2 changed files
• Comments generated: 1